# PhishDestroy domain threat record: velodromechain.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/velodromechain.com/
Machine-readable companion: https://phishdestroy.io/domain/velodromechain.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 09:00:42 UTC
- Last availability or vendor check: 2026-10-25 12:23:05 UTC
- Stored record updated: 2026-10-25 12:23:05 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: velodrome

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 403
- Registration date in stored WHOIS data: 2026-10-21 22:01:21 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17249-a6c0-755a-89f3-5c046567c7e0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/velodromechain.com
- Certificate Transparency search: https://crt.sh/?q=%25.velodromechain.com
- Web Archive lookup: https://web.archive.org/web/*/https://velodromechain.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed velodromechain.com after an admin report on 2026-10-25. The page responded with HTTP 403 and a Cloudflare challenge, so the content could not be examined. The domain was registered three days earlier on 2026-10-22.

How the scam works
The current evidence does not demonstrate a specific fraud technique; the domain could be used for phishing, credential harvesting, or other scams that hide behind a challenge page. A 403 response with a Cloudflare challenge can conceal malicious payloads until a victim interacts further.

Evidence
VirusTotal scanned the domain on 2026-10-25 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing also showed no flag on the same date. OTX listed four pulses mentioning the domain, and PhishDestroy’s internal blocklist marks it as suspicious. URLScan’s engine flagged the site as malicious with a high confidence score (93) while its overall verdict was non‑malicious, and Cloudflare Radar labeled it as a newly seen domain with security risks.

Infrastructure
The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-10-22 and expires on 2027-10-22, with client‑delete‑prohibited and client‑transfer‑prohibited status. The recorded DNS resolution returned Cloudflare addresses such as 188.114.97.3, and the observed TLS certificate was issued by Google Trust Services and was valid until 2027-01-20. Headers indicated Cloudflare’s WAF was active and DNSSEC was not enabled.

What to do
Visitors should avoid submitting credentials or wallet information to this site; no malicious content was observed but the risk remains unknown. If any credentials were entered, change them immediately. Defenders should log requests to velodromechain.com, consider blocking the domain at the network perimeter, and monitor for future activity.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17249-a6c0-755a-89f3-5c046567c7e0/
Cloudflare Radar report: https://radar.cloudflare.com/scan/fc0a0dbf-b18d-46fd-b8a5-b5af528adcd7
Stored capture screenshot: https://i.ibb.co/pB2hHT5m/789f90257018.png
Cloudflare Radar screenshot (2026-10-25T09:38:27Z): https://screenshots.phishdestroy.io/cf/fc0a0dbf-b18d-46fd-b8a5-b5af528adcd7.png
URLScan screenshot (2026-10-25T08:52:50Z): https://screenshots.phishdestroy.io/us/01a17243-114b-70d1-8030-7a1a1583214b.png
URLScan capture report: https://urlscan.io/result/01a17243-114b-70d1-8030-7a1a1583214b/
URLScan screenshot (2026-10-25T08:55:27Z): https://screenshots.phishdestroy.io/us/01a17245-74d1-7099-9690-c2f29beca80d.png
URLScan capture report: https://urlscan.io/result/01a17245-74d1-7099-9690-c2f29beca80d/
VirusTotal report: https://www.virustotal.com/gui/domain/velodromechain.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=velodromechain.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 10:13:00 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/pB2hHT5m/789f90257018.png
  Captured: 2026-10-25 09:00:42 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a17249-a6c0-755a-89f3-5c046567c7e0.png
  Captured: 2026-10-25 09:00:42 UTC
  Source report: https://urlscan.io/result/01a17249-a6c0-755a-89f3-5c046567c7e0/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/fc0a0dbf-b18d-46fd-b8a5-b5af528adcd7.png
  Captured: 2026-10-25 09:38:27 UTC
  Source report: https://radar.cloudflare.com/scan/fc0a0dbf-b18d-46fd-b8a5-b5af528adcd7
  SHA-256: cfe5f28c9085be567d0cb13459d010545873bc53744e4238e3515833103474df
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17243-114b-70d1-8030-7a1a1583214b.png
  Captured: 2026-10-25 08:52:50 UTC
  Source report: https://urlscan.io/result/01a17243-114b-70d1-8030-7a1a1583214b/
  SHA-256: f39d93e36dcfb0d27d90cc0247db21cda466bea12337ab1ec683c2b6c1ef8e94
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a17245-74d1-7099-9690-c2f29beca80d.png
  Captured: 2026-10-25 08:55:27 UTC
  Source report: https://urlscan.io/result/01a17245-74d1-7099-9690-c2f29beca80d/
  SHA-256: 49b77ca0c8862e7434e23fc0f01dea6afe1a7d72d570a10698fced0c2e8cb846

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T09:16:32Z",
        "uuid": "01a17249-a6c0-755a-89f3-5c046567c7e0",
        "scanned_at": "2026-10-25T09:00:02Z",
        "final_url": "https://velodromechain.com/",
        "status": 403,
        "redirects": [
            {
                "to": "https://velodromechain.com/",
                "from": "https://velodromechain.com/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "challenges.cloudflare.com",
            "migrate.velodromechain.com"
        ],
        "ips": [
            "104.18.95.41",
            "188.114.97.3"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.cloudflare.com"
        ],
        "doc_hash": "fcc93a64a4f3377de3bc7acefe47b2bd766de4fa46b0701ad218a7d148f9b2b1",
        "script_hashes": [
            "cd1af55733923c40d480471a2467481e9a24c85bb810ae9524ba7a4b9a116a93"
        ],
        "globals": [
            "_cf_chl_opt",
            "runProgram",
            "AGRfA7",
            "qrht8",
            "LeviO5",
            "qpPe1",
            "atAFr0",
            "SABtz7",
            "FIac3",
            "RpzJz6",
            "QSqpx9",
            "ueZh9",
            "FBBK4",
            "ZliED2",
            "HKul9",
            "vUAjb0",
            "zCGb4",
            "THirw9",
            "IXEYu6",
            "nOLY0",
            "DraY9",
            "vyix0",
            "uEeN6",
            "NmGWd6",
            "nTlR0",
            "AwUcP3",
            "MkvrI5",
            "MpSwI7",
            "xrbo0",
            "vMhC1",
            "angular",
            "vvfHL3",
            "lffN9",
            "dSvRK1",
            "turnstile",
            "QBEM0",
            "AgLL2",
            "wEyW4",
            "THSr2"
        ],
        "tls": {
            "san": [
                "velodromechain.com",
                "*.velodromechain.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "velodromechain.com",
            "protocol": "QUIC",
            "valid_to": "2027-01-20T02:37:03Z",
            "valid_from": "2026-10-22T01:37:06Z"
        },
        "domain_age_days": 0,
        "apex_age_days": 0,
        "tls_age_days": 3,
        "tls_valid_days": 90,
        "requests": 12,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8",
            "content-security-policy": "default-src 'none'; script-src 'nonce-pSxGp4ticYXt8uRGvbMTbI' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.clou",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin",
            "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),s",
            "cross-origin-opener-policy": "same-origin",
            "cross-origin-resource-policy": "same-origin",
            "cross-origin-embedder-policy": "require-corp"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T09:41:22Z",
        "uuid": "fc0a0dbf-b18d-46fd-b8a5-b5af528adcd7",
        "scanned_at": "2026-10-25T09:38:27Z",
        "final_url": "https://velodromechain.com/",
        "status": 403,
        "history": [
            {
                "url": "https://velodromechain.com/",
                "status": 403
            }
        ],
        "dom_hash": "9b0956dce985a1d6b8f18fbb19e60968c1afcc397d1b2ce78fe9fc0e0f4b6be2",
        "doc_hash": "87bd3163cb9e56228fd0f1e57497e78506e7f1cfd206c0f8e1bbe7fe28dfd2fb",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "velodromechain.com",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "velodromechain.com",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "velodromechain.com",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            },
            {
                "name": "velodromechain.com",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.96.0",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-22T00:01:21Z",
            "updated": "2026-10-22T00:01:22Z",
            "expires": "2027-10-22T00:01:21Z",
            "nameservers": [
                "luke.ns.cloudflare.com",
                "rihana.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T10:10:37Z",
        "analysis_at": "2026-10-25T09:21:12Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
        "created": "2026-10-22T00:01:21Z",
        "expires": "2027-10-22T00:01:21Z",
        "updated": "2026-10-22T00:01:22Z",
        "first_seen": "2026-10-22T02:46:17Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::6815:376d"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "luke.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.55.109"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:ab1b"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "luke.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "rihana.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.171.27"
            }
        ],
        "dns_at": "2026-10-25T09:26:30Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "velodromechain.com",
                "*.velodromechain.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "df8f5fcc7f2f1b1013ab65db660ab7f2",
            "sha256": "7b199ab7f994bae0b362854f15b54345fd85f4613e6ff11e5efce2957301ffca",
            "subject": "velodromechain.com",
            "valid_to": "2027-01-20T02:37:03Z",
            "valid_from": "2026-10-22T01:37:06Z"
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765",
            "registrar_url": "https://nicenic.com",
            "created": "2026-10-22T00:01:21Z",
            "updated": "2026-10-22T00:01:21Z",
            "expires": "2027-10-22T00:01:21Z",
            "status": [
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "luke.ns.cloudflare.com",
                "rihana.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-22T00:01:21Z",
                "registration": "2026-10-22T00:01:21Z",
                "registrar expiration": "2027-10-22T00:01:21Z",
                "last update of RDAP database": "2026-10-22T00:01:21Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T09:39:20Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "velodromechain.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.33.200",
                    "host": "luke.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.244",
                    "host": "rihana.ns.cloudflare.com"
                }
            ],
            "zone": "velodromechain.com"
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "velodromechain.com"
        },
        "dns": {
            "A": [
                "188.114.97.3",
                "188.114.96.3"
            ],
            "NS": [
                "luke.ns.cloudflare.com",
                "rihana.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"luke.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418133437, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::3",
                "2a06:98c1:3121::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::3",
            "family": 6
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-22T00:01:21Z",
            "updated": "2026-10-22T00:01:22Z",
            "expires": "2027-10-22T00:01:21Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "luke.ns.cloudflare.com",
                "rihana.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "content-security-policy": "default-src 'none'; script-src 'nonce-oNCpLPkVX0WsncEjAnz0kr' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenge",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin",
                "permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*",
                "cross-origin-opener-policy": "same-origin",
                "cross-origin-resource-policy": "same-origin",
                "cross-origin-embedder-policy": "require-corp"
            }
        }
    }
}
```